nvmet-rdma: fix response use after free
authorIsrael Rukshin <israelr@mellanox.com>
Wed, 5 Dec 2018 16:54:57 +0000 (16:54 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Dec 2018 13:15:25 +0000 (14:15 +0100)
commit5f286ec243d3cf94674b7ffa281cbc2c09428a58
treea405ec74fb25b6e4a974016aa680236a29033a31
parentb2d58756858822778044de2a6a6f2e26bdc90873
nvmet-rdma: fix response use after free

[ Upstream commit d7dcdf9d4e15189ecfda24cc87339a3425448d5c ]

nvmet_rdma_release_rsp() may free the response before using it at error
flow.

Fixes: 8407879 ("nvmet-rdma: fix possible bogus dereference under heavy load")
Signed-off-by: Israel Rukshin <israelr@mellanox.com>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Reviewed-by: Max Gurtovoy <maxg@mellanox.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/nvme/target/rdma.c